Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198100.roa
File:                     AS198100.roa (raw, json)
Hash identifier:          rzMzZ8kbcoPndwNH6zBSPXP7gIUxHa8FzKaXlXXmf4E=
Subject key identifier:   0F:BC:98:D6:37:57:F7:6A:8F:7B:30:DF:FB:A4:C3:6E:D9:83:D4:E1
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       309A8D4266B1E6317091AEE98FC0951D7528EC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198100.roa
Signing time:             Sun 19 Jul 2026 10:36:09 +0000
ROA not before:           Sun 19 Jul 2026 10:31:09 +0000
ROA not after:            Sun 18 Jul 2027 10:36:09 +0000
asID:                     198100
IP address blocks:        104.234.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9a:8d:42:66:b1:e6:31:70:91:ae:e9:8f:c0:95:1d:75:28:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 19 10:31:09 2026 GMT
            Not After : Jul 18 10:36:09 2027 GMT
        Subject: CN=0FBC98D63757F76A8F7B30DFFBA4C36ED983D4E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:5d:62:38:2c:59:e2:64:8d:1c:83:10:7c:
                    1b:53:69:be:43:c9:a1:ca:fb:be:98:1b:0c:c0:da:
                    a8:d1:51:3f:41:f3:00:d4:57:30:fc:8d:58:74:91:
                    48:03:e1:e9:69:f4:df:8d:72:c1:11:e1:17:4f:e2:
                    98:32:52:c6:2b:19:a2:b2:bf:c5:bf:9f:22:06:2c:
                    fb:cc:d3:4a:71:04:e4:fa:df:7c:f6:e4:27:87:fa:
                    d5:3d:de:63:05:6a:de:e5:1b:30:65:20:b1:24:23:
                    86:ea:99:2e:e3:94:de:69:08:a1:50:48:35:e1:15:
                    93:14:15:9e:e3:b8:a1:0b:af:d8:2f:7f:29:6c:fd:
                    73:36:2c:d0:15:48:ab:68:58:ab:c0:23:30:01:1d:
                    af:cb:8f:9c:78:bb:06:ab:bd:5a:c7:8d:08:6f:09:
                    7d:8a:51:61:af:e2:70:37:a5:f2:f3:66:10:25:e0:
                    31:fc:0f:56:63:d9:88:4b:dd:21:3d:c5:5b:27:dc:
                    6f:c4:4e:3e:97:f0:76:56:c1:71:67:d9:f9:30:4f:
                    36:8b:25:7f:98:13:9c:ee:f1:50:e2:e5:98:2d:6e:
                    e3:4d:c4:72:26:5f:ce:8b:e8:1d:51:46:f7:5b:fc:
                    fb:08:a5:2f:12:9b:7e:35:45:26:64:a0:70:83:f5:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:98:D6:37:57:F7:6A:8F:7B:30:DF:FB:A4:C3:6E:D9:83:D4:E1
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:13:ba:c2:4f:5b:03:2c:05:c9:b4:85:8d:7b:5a:6e:05:a5:
         96:38:4c:84:ee:6f:91:0d:a0:01:1d:f6:5f:b2:b3:c6:48:bb:
         02:2b:56:04:e2:ad:66:ef:64:bb:59:77:30:6a:02:60:c8:57:
         05:7b:65:e6:96:da:63:dd:66:ae:af:ff:d5:02:7c:49:11:20:
         69:51:a5:89:d2:50:80:f1:e6:d7:28:72:01:16:1f:62:97:8d:
         90:6a:2a:da:c1:bf:a8:48:20:21:2c:8e:cb:09:0a:6c:74:1a:
         7c:6c:0f:73:69:c9:59:5c:dc:77:1b:96:4d:9f:90:d0:f9:43:
         af:5e:f6:16:31:cc:67:3b:b7:71:67:04:a0:0e:f5:66:7d:29:
         dc:85:8b:94:da:52:ca:00:83:0e:10:ff:2e:24:67:a9:c3:92:
         a7:fe:26:a2:82:e2:14:70:91:3c:f0:96:49:41:7a:11:33:9d:
         be:5c:db:51:c6:8c:c3:35:5d:78:53:ef:42:98:f7:85:31:9a:
         7e:d9:c7:ba:18:a7:cd:e6:06:5d:b1:40:3f:1a:36:72:9d:5f:
         e2:31:f4:07:c0:4d:e2:e3:d3:cb:26:24:70:d6:70:b8:4e:dd:
         ff:9d:7d:85:6d:27:fd:db:4b:4f:ed:81:cb:c3:39:a6:b0:b1:
         8f:11:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:49:15 2026 by rpki-client